Why did shell timeout was not considered as common Critera EAL4 Configuration in Red Hat Enterprise Linux 6.2?
Issue
- Building servers based on the Common Criteria EAL4 configuration from
cc-eal4-config-rhel62-0.33-1.el6_2.noarch.rpm. - Part of this configuration updates
/etc/profileto runscreenat the end of it's execution. - For
init-scriptsthat runsu -as part of there start-up, this results in a shell prompt on the console during startup. - Also it appears that
screenis being used as a terminal lock for inactivity, why using a shell timeout by setting theTMOUTenvironment variable wasn't considered for making it readonly? - Was the shell timeout considered alongside the screen option and if so what were the reasons for selecting screen over the shell timeout?
Environment
- Red Hat Enterprise Linux 6.2
cc-eal4-config-rhel62-0.33-1.el6_2.noarch.rpm.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
